Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62018F68C91211EFA91130B0762E951A.roa
File: 62018F68C91211EFA91130B0762E951A.roa (raw, json)
Hash identifier: E3HJknhHEFnm00qNSx7tynDTbsNcfKjMuaaF9DcFJ3I=
Subject key identifier: 19:BD:96:9B:0B:6C:D0:58:14:89:51:91:FC:F9:94:9F:A1:65:CE:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62018F68C91211EFA91130B0762E951A.roa
Signing time: Thu 02 Jan 2025 14:03:46 +0000
ROA not before: Thu 02 Jan 2025 14:03:43 +0000
ROA not after: Mon 13 Dec 2027 14:03:43 +0000
asID: 17561
IP address blocks: 154.221.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78515 (0x132b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:03:43 2025 GMT
Not After : Dec 13 14:03:43 2027 GMT
Subject: CN=67769cc2-18b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:7c:66:9e:f2:90:b3:bb:39:75:cf:93:73:
2d:55:e4:2e:48:69:d6:37:b1:80:fb:3c:18:26:85:
bc:eb:92:8d:07:c1:fd:1e:7f:fd:90:7c:af:ba:51:
3b:5b:eb:f0:16:db:2c:00:80:8b:40:e7:56:82:3e:
d4:4b:f1:1e:c1:1f:9c:3a:ec:00:cc:5d:e5:66:7f:
26:f0:11:88:cc:df:47:41:01:fd:a2:6f:c7:d3:f1:
39:5d:75:a7:e8:a3:9d:16:24:1f:5e:d3:54:e9:95:
47:e6:b5:85:61:33:ce:5c:d4:60:2f:b2:aa:bb:da:
fb:c8:b2:49:49:32:64:72:08:c5:58:da:52:f7:e4:
aa:96:fa:2f:1b:d6:14:1a:da:6c:d2:9c:80:f4:cc:
1d:8d:d5:7f:5b:c3:ed:28:bf:6d:b0:f3:b2:84:83:
bf:d3:91:c4:cd:1f:88:c0:73:e8:7e:eb:4a:3f:d7:
d5:f0:d8:48:23:78:10:27:88:e7:7c:06:29:a9:2c:
b8:96:91:68:d7:15:49:a0:bf:9c:fb:f2:bd:54:7f:
6b:e7:6e:89:a5:63:4d:3e:67:4f:a4:92:47:68:5b:
d3:8d:05:81:cb:e6:17:0a:8f:3f:e8:f6:b3:81:46:
7a:31:bf:83:f2:98:f6:37:ce:cc:b6:c0:cd:2e:41:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BD:96:9B:0B:6C:D0:58:14:89:51:91:FC:F9:94:9F:A1:65:CE:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62018F68C91211EFA91130B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.230.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:93:9f:b9:6b:7b:eb:0b:c2:56:64:37:ed:f2:fd:c4:35:63:
fa:4c:41:0e:56:cd:bc:f3:b3:ef:b0:da:30:b5:1a:42:32:cc:
67:d7:34:85:10:f6:85:85:3c:78:3f:75:fd:27:20:15:e2:68:
8f:04:ab:96:e0:bf:88:80:86:9e:d8:6a:a9:dd:97:bf:23:b7:
1b:54:3a:51:76:93:45:23:f9:56:08:b7:c5:78:5d:b9:6a:3e:
bd:53:b3:47:7a:69:99:e0:96:16:68:98:5f:df:aa:e4:a7:55:
6f:b7:8c:43:5b:c0:4c:33:98:ad:35:70:9f:dd:93:b2:5b:c7:
91:d9:7b:9c:6f:c7:eb:ad:95:70:fd:81:a5:74:f4:28:f6:e5:
11:98:1d:d2:e8:f3:14:e0:87:40:4b:65:fb:25:80:d7:cc:fb:
5b:06:86:fc:e0:4d:98:b0:ed:d9:97:2d:65:b5:86:0b:db:ea:
2a:04:54:73:96:57:90:64:0c:38:35:bd:54:a9:ad:13:80:d3:
47:bb:70:cd:4c:a6:ed:9e:24:a9:73:51:5e:66:6f:93:1c:78:
61:db:ff:7a:f4:7b:21:eb:e2:63:66:76:8d:f6:5d:80:b4:63:
4e:f1:34:e5:3f:c3:77:93:15:e2:a4:9c:e7:46:9f:64:04:a9:
c3:e4:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:47 2025 by rpki-client